Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/95430a08dd3b1725d69b93408f28bb5cdf63994e.roa
File:                     95430a08dd3b1725d69b93408f28bb5cdf63994e.roa (raw, json)
Hash identifier:          fEwgxIkM4JgZgW6qoPXtWXY/AdIn4sy5MJjQMdwZa10=
Subject key identifier:   B9:7A:00:0A:EF:53:EB:1B:63:FC:D7:06:CA:5B:F8:0C:C7:3A:F9:C8
Certificate issuer:       /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial:       06D70E
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/95430a08dd3b1725d69b93408f28bb5cdf63994e.roa
Signing time:             Wed 24 Mar 2021 14:41:40 +0000
ROA not before:           Wed 24 Mar 2021 14:41:38 +0000
ROA not after:            Tue 24 Mar 2026 14:41:38 +0000
asID:                     264637
IP address blocks:        170.80.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448270 (0x6d70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Validity
            Not Before: Mar 24 14:41:38 2021 GMT
            Not After : Mar 24 14:41:38 2026 GMT
        Subject: CN=95430a08dd3b1725d69b93408f28bb5cdf63994e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:72:dc:f3:b3:36:99:5c:60:55:f6:25:31:
                    5f:84:ec:d8:83:be:27:41:fc:1c:6e:3e:08:48:d7:
                    cd:4e:54:4b:cf:3f:47:b5:b1:51:f4:cb:5a:06:1d:
                    3d:e8:8a:69:e2:06:c8:00:46:83:3e:0a:b3:3b:02:
                    90:c0:6a:d6:77:2c:06:f7:4d:04:48:b1:29:6e:03:
                    ab:4a:80:e6:51:88:19:02:61:81:c1:73:c4:45:43:
                    39:3d:2a:95:d4:f9:2e:11:6e:76:f1:9f:39:71:bc:
                    88:6b:c2:62:1b:60:ae:63:c1:2b:1f:f6:3a:4d:17:
                    ea:a0:ed:43:49:35:de:a7:7b:76:99:5c:99:07:18:
                    f6:2f:11:49:6b:d5:60:d8:bb:3e:a1:77:f4:51:39:
                    d0:2d:67:b0:bd:54:02:69:b1:21:73:c4:17:76:f0:
                    ca:c2:5b:02:69:44:84:c1:c2:a3:f0:00:31:c1:6c:
                    9d:08:6b:c6:a2:39:2d:37:8d:93:00:d1:3a:bb:71:
                    79:3b:a7:39:f4:22:dc:52:35:40:57:84:67:fa:5e:
                    61:53:f5:b8:27:0b:38:ae:05:70:bd:03:9f:3f:30:
                    33:ef:9f:0a:7f:c2:fe:38:1d:a0:bf:10:94:e3:49:
                    99:85:11:d6:d8:cc:74:5d:2f:68:d9:3b:3d:34:86:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:00:0A:EF:53:EB:1B:63:FC:D7:06:CA:5B:F8:0C:C7:3A:F9:C8
            X509v3 Authority Key Identifier:
                keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/95430a08dd3b1725d69b93408f28bb5cdf63994e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:b7:95:66:fb:e1:fd:1e:59:b7:24:1e:1d:ef:eb:89:7d:
         ec:dd:68:56:7e:63:cb:fd:3b:7e:46:43:e4:6b:e5:fc:ac:e1:
         97:4b:93:e6:a1:3a:4c:51:b5:29:f3:ec:49:1d:03:a4:00:98:
         3f:c9:c0:2e:43:11:52:8b:e9:95:2b:c3:33:f4:6d:dc:66:1f:
         8e:00:21:e3:8a:8c:a6:6a:fe:f8:7d:25:51:f7:63:be:a6:1e:
         7a:6a:43:45:b7:d6:1e:c7:15:51:59:71:03:e9:e5:3c:29:e8:
         61:d5:d9:f8:c0:3a:6c:fb:12:d1:c9:99:59:0f:41:a8:ec:87:
         34:86:b4:9c:bb:20:05:e6:78:2e:80:c9:06:e1:82:83:02:ba:
         0b:90:2c:1c:04:3c:4a:ae:df:30:4c:04:e1:5d:c7:be:e9:3f:
         54:c0:16:fd:a8:dc:9a:de:4e:d7:dd:02:4a:5c:5f:17:e6:1f:
         be:3e:01:76:98:b9:6f:c1:d5:f1:67:41:6b:a4:e1:6f:3e:36:
         88:73:67:70:a1:da:0c:17:f9:d0:85:49:10:90:0b:11:da:d6:
         b2:44:a5:1a:ff:b2:79:2c:f5:a5:9a:d2:d3:4c:21:a4:5f:b8:
         d2:f9:ee:78:e1:76:c8:dd:ab:49:5f:06:1a:51:9a:f4:97:93:
         2c:c2:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org